I have a file that I want to be accessible by a single user, but I don't want the user to have access to the folder it resides in. My understanding is that the following steps should work, but they don't seem to. Can anyone spot my mistake? Thank you in advance.
I disabled Selinux just to ensure that's not the problem.
setenforce Permissive setfacl -m u:ianadmin:rw- /var/log/Xorg.0.log getfacl /var/log/Xorg.0.log # file: var/log/Xorg.0.log # owner: root # group: root user::rw- user:ianadmin:r-- group::--- mask::r-- other::--- su ianadmin cat /var/log/Xorg.0.log cat: /var/log/Xorg.0.log: Permission denied